GDPR Policy (UK) – South Asian Heritage Trust

Prior Note:

This GDPR Policy should be read in conjunction with our Privacy Policy and Terms and Conditions, which provide further information about the use of our Website and services.

Introduction

This GDPR Policy outlines how South Asian Heritage Trust (referred to as “we,” “us,” or “our”) collects, uses, stores, and protects personal data in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws applicable in the United Kingdom. This policy applies to the personal data we collect from users (referred to as “you” or “your”) of the website southasianheritage.org.uk (referred to as the “Website”) and any related services.

When you contact us through our website or by email using the domain southasianheritage.org.uk, we will collect certain information from you, including your email address, name, and the reason for contacting us and conversation streams. We do this in order to maintain a record of our communication whilst adding communication details to our database.

It’s important to note that we respect your rights regarding communication preferences. Whilst you may be automatically and respectfully added to a database of important contacts for media information such as newsletters or updates, you have the right to unsubscribe at any time. You can do so by using the provided unsubscribe option in the first communication you receive, whether it’s a newsletter or any other platform we utilize.

By providing us with your contact information and engaging in communication with us, you consent to our collection and storage of your personal data. We take the privacy and security of your information seriously and will handle it in accordance with the UK General Data Protection Regulation (GDPR) and other applicable data protection laws.

This GDPR Policy provides detailed information on how we collect, use, store, protect, and share your personal data. It outlines our legal basis for processing, data retention practices, data security measures, your rights as a data subject, and how to contact us for any inquiries or requests regarding your personal data.

If you have any concerns or questions about how we handle your personal data, please don’t hesitate to contact us. We are committed to being transparent and ensuring that your privacy rights are protected.

Data Controller

South Asian Heritage Trust acts as the data controller and is responsible for the processing of personal data collected through the Website. Our contact details are as follows:

South Asian Heritage Trust
Email: umran@southasianheritage.org.uk

Types of Personal Data Collected

We may collect and process the following types of personal data from you:

• Contact information, including your name, email address, phone number, and postal address.
• Event details, if you submit an event through the Website, including event name, date, location, description, and related information.
• Communication data, including any correspondence between you and us via email, contact forms, or other means.
• Website usage data, including information about how you use and navigate our Website, IP address, browser type, and other technical details collected through cookies or similar technologies.

Purposes and Legal Basis for Processing Personal Data

We process personal data for the following purposes and based on the corresponding legal basis:

• Performance of a contract: We process personal data to fulfill our obligations when you submit an event or engage in other activities on our Website as part of a contractual agreement between you and us.
• Legitimate interests: We may process personal data to pursue our legitimate interests, such as improving our services, understanding user preferences, managing and promoting events, and responding to inquiries or communications.
• Consent: In some cases, we may rely on your explicit consent to process certain personal data, such as when you subscribe to our newsletter or provide consent for specific data processing activities.

Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. The criteria used to determine the retention period include the nature of the personal data, the purposes for processing, any contractual obligations, and legal or regulatory requirements.

Data Security

We implement appropriate technical and organizational measures to ensure the security of your personal data and protect it against unauthorized access, loss, misuse, or alteration. We regularly review and update our security measures to maintain the integrity and confidentiality of personal data.

Data Sharing and Transfers

We may share your personal data with trusted third parties who assist us in providing our services or support our operations, such as event partners, service providers, or legal and regulatory authorities as required by law. We take steps to ensure that any third parties who process personal data on our behalf comply with the relevant data protection laws and maintain appropriate security measures.

Access to Shared Drive

Requests to access our shared drive may result in your email address being visible to others who have access to the shared drive. By requesting access to any of the stored files, you agree to this visibility. The South Asian Heritage Trust and the project operating the shared drive are not responsible for the visibility of your email address in this context.

Your Rights

You have certain rights regarding your personal data under the GDPR, including:

• Right to access: You can request access to the personal data we hold about you.
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data.
• Right to erasure: You can request the deletion of your personal data under certain circumstances.
• Right to restrict processing: You have the right to request the limitation of processing in certain situations.
• Right to data portability: You can request the transfer of your personal data to another organization in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

To exercise your rights or if you have any questions or concerns regarding the processing of your personal data, please contact us using the contact details provided in section 2 of this policy.

Cookies and Tracking Technologies

Our Website may use cookies and similar tracking technologies to enhance your browsing experience, analyze website usage, and personalize content. By using our Website, you consent to the use of such cookies and tracking technologies. You can manage your cookie preferences through your browser settings or opt out of certain tracking technologies where applicable.

Changes to this GDPR Policy

We reserve the right to update or modify this GDPR Policy from time to time to reflect changes in our data processing practices, legal requirements, or any other operational reasons. We will provide notice of any significant changes on our Website or through other appropriate communication channels.

Contact Us

If you have any questions, concerns, or requests regarding this GDPR Policy or the processing of your personal data, please contact us using the following details:

South Asian Heritage Trust
Email: umran@southasianheritage.org.uk

We will endeavor to respond to your inquiries or requests in a timely and appropriate manner.

Last updated: 19th July 2024